Can't they just turn on Cloudflare or take any of the other logical actions when a site is visibly under attack? They need to hire an even barely capable admin.